@senticor/hive 1.56.4 → 1.56.7

package/chive.cjs

@@ -391,6 +391,20 @@ var INGEST_LIMIT_SPEC = {
   manifestMaxApplicationIds: { env: "HIVE_MANIFEST_MAX_APPLICATION_IDS", default: 1e5, ceiling: 1e5 },
   /** Max attached documents per application. */
   maxDocsPerApplication: { env: "HIVE_MAX_DOCS_PER_APPLICATION", default: 50 },
+  /**
+   * Max decoded bytes for one REST application submit (#242) — the whole
+   * dossier travels as one base64 JSON body on
+   * POST /api/missions/:missionId/applications, so this is a heap/DoS bound:
+   * a ~35 MiB body (25 MiB of PDFs) costs ~65-70 MiB peak heap per request.
+   * The submit route sizes its own bodyLimit from this cap (base64 + JSON
+   * envelope), the decoded total is enforced on the door (413
+   * APPLICATION_TOO_LARGE — L4, an advertised cap is never unenforced), and an
+   * env override is clamped to `ceiling` so a typo cannot turn the door into an
+   * unbounded body sink (L3). Default 26 MiB: the realistic upper end is 25 MiB
+   * of PDFs (same figure as maxIngestFileBytes) plus headroom for the
+   * application form and file names.
+   */
+  maxApplicationBytes: { env: "HIVE_MAX_APPLICATION_BYTES", default: 26 * 1024 * 1024, ceiling: 100 * 1024 * 1024 },
   // NOTE: a per-jobposting application ceiling is intentionally NOT advertised
   // here yet — enforcing it needs a durable per-jobposting counter at ingest,
   // deferred to a follow-up. Advertising an unenforced limit would mislead

package/hive.cjs

@@ -10376,22 +10376,22 @@ var artifactName = injectedString(
   true ? "hive-cli" : void 0
 ) || String(process.env.HIVE_CLI_ARTIFACT_NAME || "hive-cli").trim() || "hive-cli";
 var packageVersion = injectedString(
-  true ? "1.56.4" : void 0
+  true ? "1.56.7" : void 0
 ) || String(process.env.HIVE_CLI_PACKAGE_VERSION || "").trim() || readPackageVersion();
 var releaseVersion = injectedString(
-  true ? "1.56.4" : void 0
+  true ? "1.56.7" : void 0
 ) || String(process.env.HIVE_CLI_RELEASE_VERSION || "").trim() || packageVersion || "dev";
 var releaseChannel = injectedString(
   true ? "final" : void 0
 ) || String(process.env.HIVE_CLI_RELEASE_CHANNEL || "").trim() || (releaseVersion.includes("-rc.") ? "rc" : releaseVersion === "dev" ? "dev" : "final");
 var buildCommit = injectedString(
-  true ? "35bf880b5e0f12ae5c544f40d60665026228e617" : void 0
+  true ? "cb2705c14f1a5d7de07d6c64c3916000237d2f33" : void 0
 ) || String(process.env.HIVE_CLI_BUILD_COMMIT || "").trim() || "unknown";
 var buildTimestamp = injectedString(
-  true ? "2026-10-08T20:23:26Z" : void 0
+  true ? "2026-10-09T22:43:32Z" : void 0
 ) || String(process.env.HIVE_CLI_BUILD_TIMESTAMP || "").trim() || "unknown";
 var ociRef = injectedString(
-  true ? "registry.onstackit.cloud/senticor/hive-cli:1.56.4" : void 0
+  true ? "registry.onstackit.cloud/senticor/hive-cli:1.56.7" : void 0
 ) || String(process.env.HIVE_CLI_OCI_REF || "").trim() || `registry.onstackit.cloud/senticor/${artifactName}:${releaseVersion}`;
 var RELEASE_INFO = Object.freeze({
   packageVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@senticor/hive",
-  "version": "1.56.4",
+  "version": "1.56.7",
   "description": "Cognitive Hive OS — unified CLI",
   "type": "commonjs",
   "bin": {